[Oisf-users] Get from eve.json-> "event_type = file" parser error in elasticsearch

Stefan Sabolowitsch Stefan.Sabolowitsch at felten-group.com
Wed Feb 12 08:40:16 UTC 2014


Hi all,
Get from eve.json-> "event_type = file" parser error in elasticsearch.
https://groups.google.com/d/msg/elasticsearch/1P3fM0oa7gU/8g0qqUxfPSoJ

All other event types work without problem.
The interesting thing is however, that can be parsing "files json.log" without problem.
Has anyone already successfully sent eve.json-> "event_type = file“ to elastic search?

Thanks for any help.
Stefan


More information about the Oisf-users mailing list